CVE-2017-15890

MEDIO 4.8CVE-2017-15890 · Published 15/12/2017 · updated 17/06/2026

En resumen

CVE-2017-15890 es una vulnerabilidad MEDIO (CVSS 4.8) que afecta a mailplus server (synology).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.77%, mayor que el 55.8% de las vulnerabilidades.
Solución: actualizar a 1.4.0-0415 o posterior.

Package	Affected versions	Patched versions
mailplus server synology	`< 1.4.0-0415`	`1.4.0-0415`

Description

Cross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary web script or HTML via the NAME parameter.

References

synology.com/en-global/support/security/Synology_SA_17_75 · Vendor Advisory

Más vulnerabilidades de mailplus server

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free